Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [log4j]

31 questions
1
vote
1 answer

Custom Event IDs Using NTEventLogAppender

This is my first post on ServerFault, but I love StackOverflow. I'm a coder, and as such I'm more comfortable in an IDE than in the registry, so I've come here for help. Problem: I have a chain of loggers CustomLogger (appends the log message with…
ThoughtCrhyme
  • 111
  • 3
1
vote
1 answer

Log4j - Older app on Windows server using JRE 1.8.0.x - is it impacted?

I can't find any info on whether specific versions of JRE are impacted? The app on my Windows Server 2012 uses JRE 1.8.0.x (1.8.0_91) but not sure if if uses Log4j logging service. Can anyone help clarify because oddly, I can't find anyone…
Chris
  • 11
  • 1
1
vote
1 answer

Use kong reverse proxy to filter log4j exploits

I am using a kong reverse proxy to proxy every HTTP request for my web servers. I would like to mitigate the current log4j problem ("log4shell") by finding and replace the critical attacers' strings like "jndi". For example I found this im my…
dsteinkopf
  • 161
  • 1
  • 8
0
votes
0 answers

Unable to log machine's fqdn instead of "localhost" from java program

I am currently using log4j library in java to post logs onto syslog but those logs always show "localhost" for hostname instead of the device's actual name. This only happens when i send log from my java program. If i use logger to send logs to…
Syed Muhammad Oan
  • 111
  • 5
0
votes
1 answer

Appending new lines in Tomcat Catalina log rotate

Application running on Tomcat is using log4j for some unknown reason is appending (randomly) new log lines somewhere in the middle of the log file log4j.properites looks like: log4j.rootLogger=INFO,…
JackTheKnife
  • 371
  • 1
  • 6
  • 24
0
votes
0 answers

configure java.util.logging logging.properties to write app logs with systemd

I am charged with making migrating an app from centos 5.5 to centos 7.2. I can start my tomcat app using systemd but the app's log file is not being written to /home/tomcat where people expect it to be. (The app lives in…
mr.zog
  • 923
  • 3
  • 20
  • 39
0
votes
1 answer

Is there log4net pattern format logs viewer?

Do you know a good free log viewer for existing log4net log files that were written using PatternLayout format? I've found: LegitLogViewer (probably it is possible to configure that one) YALV!(xml) Log4View(paid) Log2Console (unstable)…
Vladislav Kostenko
  • 226
  • 1
  • 2
0
votes
1 answer

Switching Log4j mode to DEBUG in Weblogic Server

I am using weblogic 10.5 and my application has 4 managed servers, having the below mentioned configuration in weblogic startup script to enable log4j. JAVA_PROPERTIES="${JAVA_PROPERTIES} -Dlog4j.configuration=file:${LOG4J_CONFIG_FILE}" I have given…
Jai
  • 11
  • 2
0
votes
1 answer

Logging not getting disabled

Out Tomcat 8 is logging so much so that by the evening the catalina.out inflates to GBs of data. I followed the procedure given on the tomcat website to replace JULI logging with LOG4J. Now LOG4J has started logging in catalina but catalina.out is…
6nagi9
  • 119
  • 3
0
votes
1 answer

How to log all sql going through JBoss datasource with log4j

I've looked at log4jdbc (which does not support datasources), p6spy which seems to be what I am looking for but it has not been updated since 2003 which makes me nervous and lists only JBoss 3.x (we use JBoss 5), and JAMon which seems heavyweight…
Ichorus
  • 485
  • 1
  • 6
  • 12
0
votes
2 answers

apache remove wget for better security

Im no expert at IT or apache but I have used linux for years. Ive done my best to harden/secure my server online which I use for a mobile app which needs to serve up its content etc. Ive noticed some attempts at hacking my Apache 2.4.57 server…
Tim
  • 203
  • 1
  • 9
0
votes
1 answer

How to replace/update Apache Log4j 1.2.x with 2.17?

My vulnerability scanner recently flagged an unsupported installation of Apache Log4j in a version of MS SQL we just recently deployed (SQL 2019). It causes two high-priority findings that I must get resolved. It seems to be, specifically, the…
The ITea Guy
  • 321
  • 1
  • 6
  • 16
0
votes
0 answers

How to detect log4J on windows server 2016 Datacenter machine

So I recently got a mail about updating to the latest security update to the Apache software installed on my server (vulnerability (CVE-2021-44228 & CVE-2021-45046) related to Apache Log4j), but how can I detect where this log4j is used? When I run…
Mads Sander Høgstrup
  • 111
  • 4
0
votes
0 answers

locate all nested war/jar files inside jboss/wildfly - log4j

I want to detect all nested wars and jars containing the log4j library. I have jboss/wildfly services. I started to find out with 'locate | grep', but it shows me only tmp directories, not exactly war/jar files, for example…
grU
  • 1
  • 1
0
votes
1 answer

List of services affected by the Apache Log4jshell Vulnerability

Does there yet exist a list of software that is potentially affected by the Apache Log4jshell vulnerability (CVE-2021-44228) that was announced last Friday? As someone managing a number of servers with lots of different software running on them it…
twhitney
  • 33
  • 6
1
2
3